Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/a8e04b-0dba-40ec-b126-f457d404ae2f/1/BU7Dku52VYFGcFlAJlk2TweASow.roa
File: BU7Dku52VYFGcFlAJlk2TweASow.roa (raw, json)
Hash identifier: zOsKMt8sgCuvzwDFvt6v4vBJ1ZbBZei0T/cdVQYRaik=
Subject key identifier: 05:4E:C3:92:EE:76:55:81:46:70:59:40:26:59:36:4F:07:80:4A:8C
Certificate issuer: /CN=2c88db81fdfbeccee75f4a9f698a3c1b3a84626e
Certificate serial: 018287E1E018783E8501F96F6F32F186D843
Authority key identifier: 2C:88:DB:81:FD:FB:EC:CE:E7:5F:4A:9F:69:8A:3C:1B:3A:84:62:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LIjbgf377M7nX0qfaYo8GzqEYm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/a8e04b-0dba-40ec-b126-f457d404ae2f/1/BU7Dku52VYFGcFlAJlk2TweASow.roa
Signing time: Wed 10 Aug 2022 13:11:43 +0000
ROA not before: Wed 10 Aug 2022 13:11:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58096
IP address blocks: 193.160.204.0/23 maxlen: 32
94.141.124.0/24 maxlen: 24
91.220.69.0/24 maxlen: 24
193.105.114.0/24 maxlen: 32
185.154.72.0/22 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:87:e1:e0:18:78:3e:85:01:f9:6f:6f:32:f1:86:d8:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c88db81fdfbeccee75f4a9f698a3c1b3a84626e
Validity
Not Before: Aug 10 13:11:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=054ec392ee765581467059402659364f07804a8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:36:f9:4a:2a:c7:12:c6:08:95:7b:3f:4d:03:
84:b9:cd:26:26:6c:a5:d3:7f:1e:99:d3:23:7d:6d:
47:98:12:28:71:3a:5c:0b:df:37:65:e7:3a:79:5a:
6c:4e:f6:54:35:86:8d:3b:45:0d:44:d2:96:18:b9:
e1:c5:5d:40:9e:7f:67:58:51:2c:13:78:32:fd:ff:
39:48:6f:5b:3e:88:d3:b4:c7:8b:6d:3d:f6:41:09:
10:ac:4b:01:98:d8:a0:da:18:19:c5:96:23:ec:38:
e5:0b:d9:68:4c:eb:0e:3a:d7:37:ed:55:de:de:71:
5c:db:dd:85:8e:98:8a:ef:98:ab:39:ff:3c:f2:4d:
39:7f:b2:b6:83:15:87:54:1e:d4:fd:c2:e2:cc:e1:
0e:7b:b1:dc:43:b6:cf:13:ba:24:4d:0c:4b:8c:c9:
a9:9e:a5:64:46:48:46:f1:ec:20:8b:71:c3:54:05:
95:d5:94:b0:6b:12:81:cc:19:ba:d4:02:cd:e8:ed:
84:27:ad:14:aa:b9:6c:ac:c4:c7:d5:65:cd:96:8e:
7f:46:08:be:94:70:3e:07:06:d0:a3:5f:18:16:76:
3d:4f:7d:f5:6d:02:00:7f:b0:73:98:69:a1:a8:9e:
3e:aa:39:bd:79:6e:8c:b1:69:c2:ee:01:ec:90:04:
79:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:4E:C3:92:EE:76:55:81:46:70:59:40:26:59:36:4F:07:80:4A:8C
X509v3 Authority Key Identifier:
keyid:2C:88:DB:81:FD:FB:EC:CE:E7:5F:4A:9F:69:8A:3C:1B:3A:84:62:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LIjbgf377M7nX0qfaYo8GzqEYm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a8e04b-0dba-40ec-b126-f457d404ae2f/1/BU7Dku52VYFGcFlAJlk2TweASow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a8e04b-0dba-40ec-b126-f457d404ae2f/1/LIjbgf377M7nX0qfaYo8GzqEYm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.69.0/24
94.141.124.0/24
185.154.72.0/22
193.105.114.0/24
193.160.204.0/23
Signature Algorithm: sha256WithRSAEncryption
0f:e5:9d:2f:f3:53:42:22:ce:ce:6a:37:01:4e:fa:0a:1e:ec:
aa:90:3b:49:fe:45:9b:ea:03:7c:68:2e:30:01:c6:cf:78:f1:
0b:43:25:af:b3:d9:8e:fe:07:d3:da:0a:f0:bd:1f:c2:04:1e:
80:70:d5:57:16:d4:dd:1a:07:b1:2a:89:b8:4a:69:63:fe:92:
eb:9a:2b:10:12:db:cd:a4:0c:f3:6e:43:9f:ee:3b:2e:20:cf:
ef:40:54:7f:c3:03:f4:de:af:17:2c:78:36:1d:3c:5b:c0:0e:
87:7f:2e:a0:9d:cd:c6:cb:72:cb:4e:da:53:55:e6:44:4b:ba:
a8:73:d7:82:ee:2c:c7:3d:3e:5a:c0:4e:6e:1e:c4:88:cd:76:
85:86:29:31:83:69:93:12:f5:61:38:3f:53:3e:c7:cb:61:15:
a5:7b:39:7b:48:17:69:bf:17:a7:30:e6:f7:6d:2e:01:fe:9e:
c7:3b:5a:76:9d:a4:77:22:2c:e5:eb:80:34:46:6b:b4:1c:6b:
26:6e:c9:da:cc:25:1d:fe:bd:a1:9c:43:2a:6d:a1:1d:d5:cd:
87:a7:fb:c0:d2:fa:5e:cc:2b:ce:48:c2:87:09:07:65:39:d3:
30:a3:00:ae:76:01:89:d4:d0:a0:63:e8:01:a2:a0:cd:2d:08:
16:56:a2:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:32 2023 by rpki-client on console.sobornost.net